This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
File: 3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft (raw, json)
Hash identifier: vlsXdzZmPy1UZN1h3CIAP2kyyyqdoii9pjho/lMIxVU=
Subject key identifier: 21:2A:E9:FB:8B:BA:89:69:94:2D:E5:32:D4:10:C9:88:6C:A1:A0:A7
Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
Certificate issuer: /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Certificate serial: 019B37FCAE69AC2C68CCF3E2FE2AE8E4C6E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
Manifest number: 145A
Signing time: Fri 19 Dec 2025 19:01:04 +0000
Manifest this update: Fri 19 Dec 2025 19:01:04 +0000
Manifest next update: Sat 20 Dec 2025 19:01:04 +0000
Files and hashes: 1: 2VevK0HBk8qY35gQ5UtjfqrB3nY.roa (hash: AmV1BLqc7vTs/6UGFEgRF0w9AuqYNGKRtxRFQd+4rZ8=)
2: 3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl (hash: 3f++0hofluPCEynf8WDG9gx4HwQY4SZ6eTW61r5uhyA=)
3: 5vHG0OxzvrqhI56hWt2APxlEca8.roa (hash: bzsGlpjOWPgo9xk0iMmmEBroNlHWE3HqNZ6pialCu6g=)
4: gr8V9GG2sn3v6HXV22VsNMEvx-4.roa (hash: sigWijBONNzFo5YlkJnYB4sz+kl8GULVAa+gCk4rEkg=)
5: v3bh2N4thqCv2jw1YX5PjUcZEd0.roa (hash: nIfMLuntg2xncQRj0ShSY9tFssqvjsfpfyRvdL0VSvM=)
6: yjS8W9q67f67-uZJSGqCLJtk9CY.roa (hash: M5J4UIW6ljIVCBEds8d+YToalBiEOBtwIgj/E8wpY8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 17:13:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:37:fc:ae:69:ac:2c:68:cc:f3:e2:fe:2a:e8:e4:c6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Validity
Not Before: Dec 19 19:01:04 2025 GMT
Not After : Dec 20 19:01:04 2025 GMT
Subject: CN=212ae9fb8bba8969942de532d410c9886ca1a0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:37:25:b8:0b:18:1a:1b:b4:ea:a9:95:87:03:
f0:5f:2b:c3:5f:2f:9f:c8:c7:d5:0a:ca:73:44:55:
7b:23:55:cf:54:36:80:20:e2:5d:4b:08:34:c2:64:
bd:6d:d6:61:7a:e5:f2:89:9d:82:ae:6b:a7:57:d8:
43:46:90:34:e3:43:ee:f2:84:7b:c4:18:de:8a:73:
65:e7:a7:02:5d:6d:a0:8c:68:3f:6b:23:74:6a:fb:
2f:8c:a9:bb:df:64:ff:87:e0:c5:1d:de:9c:2d:b1:
37:a6:47:bb:4e:b0:87:d3:46:d4:a6:2d:69:35:a2:
25:a7:98:62:ae:cd:27:06:e8:d7:f4:e5:7b:66:5a:
1e:92:87:49:de:31:5f:3f:69:0f:df:8f:56:45:41:
12:3a:4f:0b:ee:76:c8:6a:78:3c:ef:2a:01:7a:95:
a4:05:01:79:08:62:51:05:94:01:c2:9f:76:f6:21:
b3:5f:8c:22:c2:a7:4e:47:2d:47:83:f9:5e:42:14:
e3:93:55:35:ee:a1:7c:6f:c1:37:80:d2:4c:ba:92:
03:d8:4d:30:c3:7f:32:fc:fe:c0:9d:ed:0c:92:0f:
ee:99:84:91:b7:8e:3e:ca:71:a1:de:bb:2d:e5:6b:
e4:14:00:4e:d3:91:e7:a3:bc:8f:53:50:24:22:2a:
ca:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2A:E9:FB:8B:BA:89:69:94:2D:E5:32:D4:10:C9:88:6C:A1:A0:A7
X509v3 Authority Key Identifier:
keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:4f:19:02:2b:15:4b:09:b2:ff:76:2f:3f:7f:74:c5:80:f3:
ad:e2:92:a1:6a:e8:7f:f6:a0:fd:76:18:eb:97:58:85:bf:7f:
e4:a0:5e:78:50:2d:a4:c1:e7:cd:0a:5a:8a:19:ab:8b:9b:10:
2f:75:31:d4:ed:b1:2c:17:cd:f1:46:a5:13:e4:1c:2b:28:d9:
fa:9e:5c:95:f1:72:75:4b:79:78:1f:58:1d:28:c6:a8:96:94:
37:9e:be:e3:d0:a3:c9:80:27:b5:2b:31:9e:e1:94:3a:ec:31:
a4:96:a3:41:c9:a1:2e:d0:7a:e6:52:ae:13:d1:20:dc:e0:c4:
bb:1a:d2:1c:f7:ac:96:26:a3:bf:02:6a:f1:e3:f4:dd:8c:8f:
43:fe:63:11:ec:b5:c1:3a:f9:56:fe:11:66:f7:62:c3:53:bc:
50:a8:4d:bf:63:d4:07:50:59:56:45:54:bf:01:8d:58:02:e5:
c1:e4:81:d1:bc:c8:ae:e5:76:e3:9a:fe:24:9a:e8:b0:1b:aa:
7c:15:d6:e9:06:8c:93:7b:6d:69:35:09:f8:1b:ae:32:a1:59:
33:fb:c4:c6:34:96:ce:32:a0:06:d4:f8:7f:39:9c:b2:1b:17:
a3:65:d8:d2:65:4d:a8:25:a5:d0:fd:66:dd:1a:d4:f1:d4:18:
b6:10:e8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:28:39 2025 by rpki-client